In Red Hat Satellite6 : `satellite-installer --certs-update-all` does not update CA certificates

Environment

• Red Hat Satellite 6

Issue

• there was a need to update SSL certificates including CA (Certificate Authority) certificates in Satellite6
• proper certificates including CA ones passed to satellite-installer together with argument certs-update-all
• the script failed to deploy the certificates - further investigation revealed CA certificates were not updated
• why, if --certs-update-all was used?

Resolution

• Use also option --certs-update-server-ca together with other options.

For more KB articles/solutions related to Red Hat Satellite 6.x SSL Certificates Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x SSL Certificates Issues

Root Cause

• --certs-update-all option updates all certificates but not CA certificates. To update CA certificates, --certs-update-server-ca option has to be used.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.